CVE-2008-0444: XSS
Published Jan 24, 2008
·Updated
Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components.
Affected Software
68 affected components
ELOG ELOG=1.0.0
ELOG ELOG=1.0.1
ELOG ELOG=1.0.2
ELOG ELOG=1.0.3
ELOG ELOG=1.0.4
ELOG ELOG=1.0.5
ELOG ELOG=1.1.0
ELOG ELOG=1.1.1
ELOG ELOG=1.1.2
ELOG ELOG=1.1.3
ELOG ELOG=1.2.0
ELOG ELOG=1.2.1
ELOG ELOG=1.2.2
ELOG ELOG=1.2.3
ELOG ELOG=1.2.4
ELOG ELOG=1.2.5
ELOG ELOG=1.2.6
ELOG ELOG=1.3.0
ELOG ELOG=1.3.1
ELOG ELOG=1.3.2
ELOG ELOG=1.3.3
ELOG ELOG=1.3.4
ELOG ELOG=1.3.5
ELOG ELOG=1.3.6
ELOG ELOG=2.0.0
ELOG ELOG=2.0.1
ELOG ELOG=2.0.2
ELOG ELOG=2.0.3
ELOG ELOG=2.0.4
ELOG ELOG=2.0.5
ELOG ELOG=2.1.0
ELOG ELOG=2.1.1
ELOG ELOG=2.1.2
ELOG ELOG=2.1.3
ELOG ELOG=2.2.0
ELOG ELOG=2.2.1
ELOG ELOG=2.2.2
ELOG ELOG=2.2.3
ELOG ELOG=2.2.4
ELOG ELOG=2.2.5
ELOG ELOG=2.3.0
ELOG ELOG=2.3.1
ELOG ELOG=2.3.2
ELOG ELOG=2.3.3
ELOG ELOG=2.3.4
ELOG ELOG=2.3.5
ELOG ELOG=2.3.6
ELOG ELOG=2.3.7
ELOG ELOG=2.3.8
ELOG ELOG=2.3.9
ELOG ELOG=2.4.0
ELOG ELOG=2.4.1
ELOG ELOG=2.5.0
ELOG ELOG=2.5.1
ELOG ELOG=2.5.2
ELOG ELOG=2.5.3
ELOG ELOG=2.5.4
ELOG ELOG=2.5.5
ELOG ELOG=2.5.6
ELOG ELOG=2.5.7
ELOG ELOG=2.5.8
ELOG ELOG=2.5.9
ELOG ELOG=2.6.0
ELOG ELOG=2.6.1
ELOG ELOG=2.6.2
ELOG ELOG=2.6.3
ELOG ELOG=2.6.4
ELOG ELOG=2.6.5
Remediation
Patch Available
Event History
Jan 24, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0444?
CVE-2008-0444 is classified as a medium severity vulnerability that allows cross-site scripting (XSS) attacks.
2
How do I fix CVE-2008-0444?
To fix CVE-2008-0444, upgrade to Electronic Logbook (ELOG) version 2.7.0 or later.
3
What types of attacks can CVE-2008-0444 facilitate?
CVE-2008-0444 can facilitate cross-site scripting (XSS) attacks that compromise user data and session integrity.
4
Which versions of ELOG are affected by CVE-2008-0444?
CVE-2008-0444 affects all versions of ELOG before 2.7.0, including versions ranging from 1.0.0 to 2.6.5.
5
How can I confirm if my system is vulnerable to CVE-2008-0444?
You can confirm if your system is vulnerable to CVE-2008-0444 by checking the version of ELOG you are using and verifying if it is below 2.7.0.